Guy Harris

Results 642 comments of Guy Harris

If you want libpcap to deliver packets as soon as they arrive, you have to turn on immediate mode, and, in the general case, that means using `pcap_create()` and `pcap_activate()`...

[The current Single UNIX Specification page for awk](https://pubs.opengroup.org/onlinepubs/9699919799/utilities/awk.html) says > When an **ERE** token appears as an expression in any context other than as the right-hand of the '˜' or...

Try using the standard libpcap client and server code in [its GitHub repository](https://github.com/the-tcpdump-group/libpcap); file any issues found with that code in its Issues section.

This appears to be Linux. The code in libpcap to send packets on a Linux network interface is ``` if (handlep->ifindex == -1) { /* * We don't support sending...

> I called pcap_sendpacket send packet at isatap0 What value did `pcap_sendpacket()` return? > and send just an IP header What value does `pcap_linktype()` return when called with the `pcap_t`...

> I used libpcap version 1.5.3, no pcap_ linktype Sorry, I got the name wrong - it's `pcap_datalink()`, not `pcap_linktype()`. So what does `pcap_datalink()` return?

31 is `ERROR_GEN_FAILURE`. NT status codes that translate to `ERROR_GEN_FAILURE` include a bunch of "somebody wrote to executable memory" codes, `STATUS_WIM_NOT_BOOTABLE`, and `STATUS_UNSUCCESSFUL`, which is, I guess, the NT status...

One thing that could be done would be to have `pcap_init()` (introduced in 1.10) do whatever sanity checks are necessary to make sure things will work correctly and, if they...

Is this the same issue as #578? If a Wireguard tunnel reports an NdisMedium type that libpcap's pcap-npf maps to a DLT_ type that the libpcap pcap compiler doesn't fully...

And what was the filter expression? If, as per my guess in #578, a Wireguard interface has NDIS type `NdisMediumIP`, which maps to libpcap type `DLT_RAW`, while filter expressions that...